A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.tenable.com/security/research/tra-2024-09 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: tenable
Published: 2024-04-05T17:40:54.797Z
Updated: 2024-08-02T01:59:50.072Z
Reserved: 2024-04-05T13:59:17.190Z
Link: CVE-2024-31849
Vulnrichment
Updated: 2024-08-02T01:59:50.072Z
NVD
Status : Awaiting Analysis
Published: 2024-04-05T18:15:09.563
Modified: 2024-04-08T18:49:25.863
Link: CVE-2024-31849
Redhat
No data.